Share via

Logs for Local Group Policy Changes

jpinpin 1 Reputation point
2022-11-25T18:49:04.813+00:00

Hey, is there a way to know if who/what changes the local group policy settings? Ex. Minimum Password Length, if I set it to 8 characters,
then someone or some system changed it to 7 characters. Is there a way to identify who/what changed the policy?

Windows for business | Windows Client for IT Pros | User experience | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dillon Silzer 60,916 Reputation points Volunteer Moderator
    2022-11-25T22:23:00.34+00:00

    Hi @jpinpin

    You can try looking for Security events in Event Viewer with ID 5136. As suggested in the article below you can use more robust software to audit GPO changes.

    Please see the following for more details:

    https://www.manageengine.com/products/active-directory-audit/how-to/how-to-track-group-policy-changes.html#:~:text=Using%20native%20auditing%20tools%20(Event,changes%2C%20and%20GPO%20link%20changes.

    --------------------------------

    If this is helpful please accept answer.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.